We don't run the same service which got pwned
this post was submitted on 18 Jun 2026
21 points (95.7% liked)
/0
2218 readers
2 users here now
Meta community. Discuss about this lemmy instance or lemmy in general.
founded 3 years ago
MODERATORS
And this is is exactly the reason why I never access the fediverse with my home IP
We don't store ips anyway
And neither did Blahaj according to their disclosure post. As far as they can tell, only the email used to sign up for the account could be compromised.
Their admins disclosed in a comment that ip addresses are stored by the Lemmy database, and were exposed.
It looks like IP addresses are stored in the DB in lemmy. It's possible that the attacker had access to those IPs, but we don't believe they accessed them. This is the sort of thing we would turn off if we could :\
From the admin
I can't access https://pen.blahaj.zone/supakaity/weve-been-hacked
I want to see the incident report.